Legal Texts

Personal Data Protection Notice (KVKK)

Last Updated: April 4, 2026

This Notice has been prepared by AVANT GARDE YAYIN VE DANIŞMANLIK TİCARET ANONİM ŞİRKETİ (“Shhhbooks” or the “Company”), in its capacity as the data controller, pursuant to the Law No. 6698 on the Protection of Personal Data (“KVKK”).

1. Data Controller

AVANT GARDE YAYIN VE DANIŞMANLIK TİCARET ANONİM ŞİRKETİ
(“Shhhbooks” or the “Company”)

Contact Information

Address: Caddebostan Mah. Bağdat Cad. Köksal Apt. No: 317 No: 12 Kadıköy / Istanbul / Türkiye

Email: info@shhhbooks.com

MERSİS No: 0104174211200001

2. Personal Data Processed

Depending on the nature of the services and activities we provide, Shhhbooks may process the following personal data:

Identity information: name, surname

Contact information: email address, phone number, delivery / billing address

Customer transaction information: order details, cart details, payment method information, delivery details, return / cancellation details

Financial information: limited records relating to payment transactions (as a rule, card details are not stored in Shhhbooks systems; payments are processed through the infrastructure of the authorized payment institution / bank)

Transaction security information: IP address, session records, log records, device / browser information

Marketing information: newsletter subscription, campaign preferences, commercial electronic communication consent records

Request / complaint information: message contents you share when contacting us, support records

Workshop / event participation information: information that may be required during application, registration, payment, and organization processes

3. Purposes of Processing Personal Data

carrying out product and / or service sales processes,
carrying out order, payment, delivery, invoicing, return, and cancellation processes,
planning and carrying out workshop, event, and registration organizations,
carrying out customer relations, request, suggestion, and complaint processes,
maintaining communication activities,
carrying out information security, transaction security, and audit processes,
fulfilling legal obligations,
using evidence and exercising the right of defense in potential disputes,
sending campaigns, announcements, event updates, and newsletters where you have provided your explicit consent,
managing and improving the website experience in line with your cookie preferences.

4. Method of Collection and Legal Basis for Processing Personal Data

Your personal data may be collected through our website, contact forms, membership forms, order / payment screens, email correspondence, social media correspondence, cargo and payment infrastructures, cookies, log records, and similar electronic / physical channels.

Your personal data may be processed on the basis of the following legal grounds set out under Article 5 of the KVKK:

being directly related to the establishment or performance of a contract,
being necessary for the data controller to fulfill its legal obligations,
being necessary for the establishment, exercise, or protection of a right,
being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person,
the explicit consent of the relevant person in cases where explicit consent is required.

5. To Whom and for What Purposes Personal Data May Be Transferred

Your personal data may be shared, for the purposes stated above and to the extent necessary, with:

payment institutions / banks,
cargo and logistics companies,
accounting / finance / e-invoicing service providers,
information technology, hosting, security, maintenance, and support service providers,
persons / institutions from whom legal, financial advisory, or consultancy services are received,
public institutions and organizations legally authorized to receive such data,
judicial authorities and enforcement / supervisory authorities.

Your personal data will not be transferred to third parties for purposes outside those stated, unless you have provided explicit consent or another legal ground set forth under applicable legislation exists.

6. Data Retention Period

Your personal data is retained for the periods prescribed under the applicable legislation and for a reasonable period required by the purpose of processing. Data whose retention period has expired is deleted, destroyed, or anonymized in accordance with the legislation.

7. Rights of the Relevant Person

Pursuant to Article 11 of the KVKK, as the relevant person, you have the right to:

learn whether your personal data is being processed,
request information if your personal data has been processed,
learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
know the third parties to whom your personal data is transferred domestically or abroad,
request the correction of personal data if it has been processed incompletely or inaccurately,
request the deletion or destruction of personal data in accordance with the KVKK,
request that correction, deletion, or destruction operations be notified to third parties to whom the personal data has been transferred,
object to the occurrence of a result against you arising from the analysis of processed data exclusively through automated systems,
request compensation for damages in the event that you suffer damage due to the unlawful processing of personal data.

8. Method of Application

You may submit your requests within the scope of the KVKK to us in writing, in accordance with the applicable legislation, or by other methods determined by the Personal Data Protection Board.

You may send your applications through one of the following channels: